$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft File: NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft (raw, json) Hash identifier: bUI1MnK35o5/0X+PaIQRPNoBgY86kBlL80hPMHwJYOU= Subject key identifier: 75:40:44:91:7E:E0:03:79:12:A8:26:3C:4A:E5:0E:4D:41:A8:7A:51 Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 11CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft Manifest number: 119C Signing time: Wed 02 Jul 2025 17:25:57 +0000 Manifest this update: Wed 02 Jul 2025 17:25:56 +0000 Manifest next update: Wed 09 Jul 2025 17:25:56 +0000 Files and hashes: 1: NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl (hash: pOQzNpLJB1bQe0lIqSsO02z8XSopvEIanD4fH+CZjIo=) 2: 7F7F1470091D11F0B7E95627C4F9AE02.roa (hash: hpmM9pfcrUFnNRets4Cm3b/cVvffA5StG3HyqAHQxOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:25:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4555 (0x11cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Jul 2 17:25:56 2025 GMT Not After : Jul 9 17:25:56 2025 GMT Subject: CN=68656ba4-81b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:e7:36:9c:30:52:5d:c2:3d:f0:23:a9:6f: 73:20:96:ca:15:14:06:9f:e3:2d:a9:bd:7d:1b:76: 53:e2:68:cd:bd:b7:6a:bf:71:e7:1f:53:96:26:a2: 0c:a2:40:3e:27:0a:bf:76:67:09:4f:bf:d0:53:69: 02:d1:34:23:5b:3f:f2:f9:75:22:ca:ce:8d:4b:06: 81:da:ea:ee:e7:57:0b:b9:3c:82:b1:d2:1b:91:d5: 35:aa:30:be:3b:68:54:53:50:9a:6f:91:94:14:19: 02:ff:27:10:27:5f:81:29:e5:f4:e7:d5:73:f2:79: c4:89:8a:23:8c:a6:6e:46:b0:5d:7f:12:89:9a:1d: 92:ff:df:1f:46:0f:b3:79:36:dc:fb:79:22:3e:2d: 0d:52:da:dd:27:a4:4a:e7:c4:88:5c:ae:7e:70:d9: 7d:61:7c:a7:85:30:b5:92:9e:77:0f:84:cd:f3:09: be:74:01:45:01:ec:7c:bd:02:62:94:dd:ef:38:99: 5a:a4:1d:69:57:06:71:6b:8c:0e:fd:2c:d0:72:35: c6:95:5b:01:48:9f:33:7f:4a:82:ab:7f:33:b2:29: f2:43:80:9e:ab:77:1e:8a:bb:f5:04:21:8c:8b:47: af:63:72:f8:45:31:99:06:1b:7a:74:44:77:26:f9: fe:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:40:44:91:7E:E0:03:79:12:A8:26:3C:4A:E5:0E:4D:41:A8:7A:51 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:23:5e:6a:39:79:5e:61:05:ab:d4:e8:59:8d:5e:56:db:82: 50:02:be:ca:29:3a:44:fb:dc:6a:7d:cd:97:94:dc:11:09:ff: 85:f9:0e:8a:39:86:4a:2e:b2:89:c9:00:5b:39:4c:bd:82:1e: 94:e9:1a:5f:ee:89:47:4a:55:43:6b:7a:c2:50:9c:b6:5c:be: ec:fa:ee:26:3f:7d:98:59:55:0e:27:31:c3:68:2c:02:ff:a0: b9:42:30:3c:ea:a5:da:c2:8f:33:25:81:85:3d:7a:97:81:c3: 14:59:cb:f0:e1:9d:26:55:2e:5e:26:ce:7d:36:3a:98:45:b1: b6:1f:8e:a6:89:74:45:4a:75:36:b4:b3:69:06:06:39:19:5a: df:23:1c:4f:7d:79:10:23:c4:2c:7d:b6:dc:93:73:c9:04:e5: 58:66:b8:44:42:a7:29:89:db:c6:eb:e8:0f:53:6e:d4:8c:ce: 42:54:c4:30:2b:69:b8:a6:fb:a6:7f:04:e8:7b:28:f2:69:3d: a1:08:e1:35:0f:de:37:5c:2f:ae:ef:a1:a3:7c:ce:89:13:da: 08:07:c3:db:c2:43:cf:df:68:75:ef:cb:c5:03:e0:05:f8:82: 2c:5c:94:f8:39:5a:fd:7c:b9:f8:54:6a:d8:a3:88:63:9d:f2: f8:c7:61:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjUwNzAyMTcyNTU2WhcNMjUwNzA5MTcyNTU2WjAYMRYwFAYD VQQDEw02ODY1NmJhNC04MWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4O/nNpwwUl3CPfAjqW9zIJbKFRQGn+Mtqb19G3ZT4mjNvbdqv3HnH1OWJqIM okA+Jwq/dmcJT7/QU2kC0TQjWz/y+XUiys6NSwaB2uru51cLuTyCsdIbkdU1qjC+ O2hUU1Cab5GUFBkC/ycQJ1+BKeX059Vz8nnEiYojjKZuRrBdfxKJmh2S/98fRg+z eTbc+3kiPi0NUtrdJ6RK58SIXK5+cNl9YXynhTC1kp53D4TN8wm+dAFFAex8vQJi lN3vOJlapB1pVwZxa4wO/SzQcjXGlVsBSJ8zf0qCq38zsinyQ4Ceq3ceirv1BCGM i0evY3L4RTGZBht6dER3Jvn+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVARJF+ 4AN5EqgmPErlDk1BqHpRMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DRUUzRDcxODA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lR aTJrZGEtb1hYbzNvSzlRNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsI15qOXleYQWr1OhZjV5W24JQAr7KKTpE+9xqfc2XlNwRCf+F+Q6K OYZKLrKJyQBbOUy9gh6U6Rpf7olHSlVDa3rCUJy2XL7s+u4mP32YWVUOJzHDaCwC /6C5QjA86qXawo8zJYGFPXqXgcMUWcvw4Z0mVS5eJs59NjqYRbG2H46miXRFSnU2 tLNpBgY5GVrfIxxPfXkQI8Qsfbbck3PJBOVYZrhEQqcpidvG6+gPU27UjM5CVMQw K2m4pvumfwToeyjyaT2hCOE1D943XC+u76GjfM6JE9oIB8PbwkPP32h178vFA+AF +IIsXJT4OVr9fLn4VGrYo4hjnfL4x2Fe -----END CERTIFICATE-----Generated at Wed Jul 2 21:46:29 2025 by rpki-client